Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: EEOwoBPqtm/X8RtDjQZVTLWRU94rYsbSgmsuZB3+erU=
Subject key identifier: 11:11:FB:DF:2C:06:A7:E0:F6:50:23:FA:8C:0D:AE:FA:FC:54:A8:63
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019CA9EB984CBEA74B5BA5BCECE3FC262507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:01:55 +0000
Manifest this update: Sun 01 Mar 2026 15:01:55 +0000
Manifest next update: Mon 02 Mar 2026 15:01:55 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 0MQu19K6zYn/ioICvVesbjqAysV8IhDL4wRoxAi48To=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:98:4c:be:a7:4b:5b:a5:bc:ec:e3:fc:26:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Mar 1 15:01:55 2026 GMT
Not After : Mar 2 15:01:55 2026 GMT
Subject: CN=1111fbdf2c06a7e0f65023fa8c0daefafc54a863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:10:1f:fc:7c:cf:a1:ea:dc:00:73:f9:b8:
8f:c5:bd:3f:0f:93:a0:fe:2b:89:a8:16:4e:0b:77:
ea:88:43:a5:f9:20:8a:17:6a:c6:02:fc:6a:2a:78:
72:0a:2e:d5:dc:2f:84:0f:11:8f:cb:01:9b:d9:98:
fa:0f:93:3c:6b:18:7b:e8:2b:44:57:f6:f9:46:e8:
10:39:25:4e:2b:87:2d:e4:f5:59:98:dc:0c:1e:85:
c5:a6:0d:ef:80:1d:c3:19:0f:0e:b1:4c:f8:83:54:
31:a2:d5:82:ff:02:5a:f2:ae:b6:8a:43:6e:28:96:
52:56:0e:02:8e:7c:60:7f:22:94:43:82:41:d6:b1:
8f:aa:3d:9a:de:07:4b:6f:b4:4d:e3:75:ff:9d:3a:
2c:dc:03:f1:f1:ac:87:a1:c1:c4:19:43:4b:71:26:
40:2d:2d:43:b6:87:5b:6f:ee:5d:ab:7d:a3:f7:dd:
7f:59:b6:40:36:16:cf:77:fd:9f:90:8d:d8:31:c9:
21:54:f0:37:6c:2a:09:78:ed:41:b8:12:da:7f:8c:
51:c5:69:57:ca:52:1d:b6:c8:87:bc:91:48:3d:48:
59:83:cd:95:9d:37:50:1c:14:e3:2a:45:14:a8:a8:
f6:0e:c6:40:69:a0:50:00:46:d9:e0:3c:62:51:53:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:FB:DF:2C:06:A7:E0:F6:50:23:FA:8C:0D:AE:FA:FC:54:A8:63
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b5:16:2f:fe:fe:82:2c:50:06:41:23:1c:43:2b:e8:9d:9c:
40:0e:07:dc:8b:66:36:3e:d6:43:70:56:be:8c:7e:68:1a:78:
a3:15:9a:a0:aa:b4:0c:e7:04:88:c5:3c:f5:ba:7d:bb:60:79:
c6:f6:d0:78:ee:81:cd:96:fb:f3:48:d1:e8:e2:33:d2:7c:d3:
46:6d:69:cf:c7:92:84:dd:8a:6f:bd:21:ba:a7:c6:69:f9:ae:
88:9b:ec:6b:84:fb:22:fd:ef:5e:64:24:c3:59:fd:5c:24:2d:
ed:01:ff:5c:c7:f3:96:b3:d4:a9:40:fe:eb:1a:67:87:78:d4:
83:01:f5:aa:4e:83:6a:8d:a5:2c:c7:77:34:e6:0a:9a:35:1d:
d4:71:c1:4f:ae:75:68:1f:90:82:52:9a:ea:dc:a7:8c:8a:a3:
10:56:60:7f:48:01:ab:c5:f6:46:87:2c:59:67:00:3c:e1:8b:
15:f7:b4:00:cf:11:48:37:17:43:19:b0:cf:8b:7d:47:79:91:
fe:9e:5c:71:b2:50:e0:ec:a2:4c:47:13:d8:8c:d6:a2:65:be:
fc:54:e0:59:82:2c:93:25:f4:d8:fd:a3:c7:0b:14:ca:99:b7:
00:68:f8:c2:f7:dc:00:91:d8:4d:7c:b3:ff:b2:46:0d:16:bd:
aa:c2:32:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp65hMvqdLW6W87OP8JiUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWJiYjA5YTVmYmVmNjEzNWMyZDkyMGJmMjdiYjYxZjVj
MmUwOWQwHhcNMjYwMzAxMTUwMTU1WhcNMjYwMzAyMTUwMTU1WjAzMTEwLwYDVQQD
EygxMTExZmJkZjJjMDZhN2UwZjY1MDIzZmE4YzBkYWVmYWZjNTRhODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUoQH/x8z6Hq3ABz+biPxb0/D5Og
/iuJqBZOC3fqiEOl+SCKF2rGAvxqKnhyCi7V3C+EDxGPywGb2Zj6D5M8axh76CtE
V/b5RugQOSVOK4ct5PVZmNwMHoXFpg3vgB3DGQ8OsUz4g1QxotWC/wJa8q62ikNu
KJZSVg4CjnxgfyKUQ4JB1rGPqj2a3gdLb7RN43X/nTos3APx8ayHocHEGUNLcSZA
LS1Dtodbb+5dq32j991/WbZANhbPd/2fkI3YMckhVPA3bCoJeO1BuBLaf4xRxWlX
ylIdtsiHvJFIPUhZg82VnTdQHBTjKkUUqKj2DsZAaaBQAEbZ4DxiUVP7RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBER+98sBqfg9lAj+owNrvr8VKhjMB8GA1UdIwQY
MBaAFAibuwml++9hNcLZIL8nu2H1wuCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAt
MmY5YjAwZmRjNWQzLzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAtMmY5YjAwZmRjNWQz
LzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLUWL/7+
gixQBkEjHEMr6J2cQA4H3ItmNj7WQ3BWvox+aBp4oxWaoKq0DOcEiMU89bp9u2B5
xvbQeO6BzZb780jR6OIz0nzTRm1pz8eShN2Kb70huqfGafmuiJvsa4T7Iv3vXmQk
w1n9XCQt7QH/XMfzlrPUqUD+6xpnh3jUgwH1qk6Dao2lLMd3NOYKmjUd1HHBT651
aB+QglKa6tynjIqjEFZgf0gBq8X2RocsWWcAPOGLFfe0AM8RSDcXQxmwz4t9R3mR
/p5ccbJQ4OyiTEcT2IzWomW+/FTgWYIskyX02P2jxwsUypm3AGj4wvfcAJHYTXyz
/7JGDRa9qsIyKg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:59 2026 by rpki-client